CVE-2010-3856

🗓️ 07 Jan 2011 18:00:00Reported by redhatType

cvelist

cvelist🔗 www.cve.org👁 35 Views

ld.so restriction bypass in glibc before 2.11.

Reporter	Title	Published	Views	Family All 122
0day.today	GNU C library dynamic linker LD_AUDIT arbitrary DSO load Vulnerability	23 Oct 201000:00	–	zdt
0day.today	glibc LD_AUDIT arbitrary DSO load Privilege Escalation	9 Nov 201100:00	–	zdt
0day.today	Glibc 2.11.3 / 2.12.x LD_AUDIT libmemusage.so Local Root Exploit	19 May 201300:00	–	zdt
0day.today	glibc LD_AUDIT Arbitrary DSO Load Privilege Escalation Exploit	10 Feb 201800:00	–	zdt
0day.today	glibc LD_AUDIT libmemusage.so RHEL-Based Arbitrary DSO Load Privilege Escalation Exploit	1 Apr 201800:00	–	zdt
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

Source	Link
openwall	www.openwall.com/lists/oss-security/2023/07/20/1
support	www.support.avaya.com/css/P8/documents/100121017
lists	www.lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html
sourceware	www.sourceware.org/ml/libc-hacker/2010-10/msg00010.html
exploit-db	www.exploit-db.com/exploits/44025/
debian	www.debian.org/security/2010/dsa-2122
vmware	www.vmware.com/security/advisories/VMSA-2011-0001.html
securityfocus	www.securityfocus.com/archive/1/515545/100/0/threaded
packetstormsecurity	www.packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html
seclists	www.seclists.org/fulldisclosure/2023/Jul/31

20 Jul 2023 11:06Current

8.9High risk

Vulners AI Score8.9

EPSS0.0894

ld.so gnu c library glibc libc6 ld_audit dynamic shared objects local users privileges unsafe dso libpcprofile.so directory restriction bypass